Privacy

Privacy Statement  

The privacy and protection of your personal data is a very important concern for BIOTRONIK. We would like to inform you which of your personal details are collected and used, the rights you have, as well as which configuration options this offers you. We process your data in compliance with applicable privacy laws, in particular the EU General Data Protection Regulation (GDPR; The same applies to the UK-GDPR, hereinafter uniformly referred to as the GDPR.) and the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG).  

This Privacy Statement provides you with a summary of the main tasks for which we process your data. You will also find additional Privacy Statements on other products and services under other sections or individual products.  


‍Data controller and point of contact for data processing  

The data controller in accordance with Article 4 para. 7 GDPR is BIOLAB Medical GmbH
Auguststraße 5 A,10117 Berlin
privacy@biolab.one  

If you have general questions about data privacy at BIOTRONIK, you can contact our Data Protection Officer. The Data Protection Officer can be reached at privacy@biotronik.com or via our mailing address with the addition
"der Datenschutzbeauftragte" (English: "Data Protection Officer").  


‍Your rights  

You can exercise the following rights at any time:
• To request information about categories of your processed data, purposes of the processing, possible recipients and envisaged period for which the personal data will be stored (Article 15 GDPR)
• To withdraw consent given at any time and with effect for the future (Article 7 para. 3 GDPR)
• To object to data processing which is performed based on a legitimate interest, on grounds relating to your particular situation (Article 21 GDPR)
• To request the rectification or completion of inaccurate or incomplete data (Article 16 GDPR)
• To request the erasure of data in certain cases – particularly in the case in which data are no longer needed for the intended purpose or are unlawfully processed, or you withdraw your consent in accordance with Article 7 para. 3 GDPR or have objected to data processing in accordance with Article 21 GDPR (Article 17 GDPR)
• To request the restriction of data processing under certain conditions, provided deletion is not possible or the deletion obligation is disputable (Article 18 GDPR)
• To receive the data you provided to us in a conventional machine-readable format and, if you wish, to request that such data be transmitted to third parties/controllers (right to data portability in accordance with Article 20 GDPR)  

In addition, you have the right to file a complaint with the data protection supervisory authorities in accordance with Article 77 of the GDPR. The supervisory authority responsible for us is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit Alt-Moabit 59-61, 10555 Berlin, Germany Phone: +49 (0)30 13889-0 Fax: +49 (0)30 2155050 E-mail: mailbox@datenschutz-berlin.de  


1. Data processing during use of website corio.health

a. Browser data  

If you visit the BIOTRONIK websites, we collect the data transmitted from your browser to our server. Depending on the browser used and its settings, these are usually the following data:  
• IP address
• Date and time of the inquiry
• Information about the time zone your browser uses • Address of the requested page (URL)
• The respectively transmitted amount of data
• Operating system
• Name, language and version of the browser software
• Manufacturer and type of the device on which the browser is used  

We generally use these data only where this is required to provide a functioning website and to show our contents and services.  
We use these data for the following purposes:  
• Enable access to and visit of the BIOTRONIK website
• Detect, eliminate, and prevent errors, malfunctions, and possible misuse  

The legal basis for the processing of these data is Section 25, para. 2(2) of the Telecommunications Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz - TDDDG) and also our legitimate interest in accordance with Article 6 para. 1(f) GDPR.  

Data will be deleted once they are no longer needed for the above-mentioned purposes within the scope of the legal basis upon which they were retained, normally when the browser session is exited but at the latest within one month.        


b. Cookies  
‍
We use cookies on the BIOTRONIK websites. Cookies are small text files or comparable storage technologies which are stored by your browser on your terminal device and allow your browser to be recognized. We use "session" cookies (temporary or transient cookies) and "persistent" cookies.  


‍Session cookies are only stored during your usage of our websites. These cookies are needed for transactions (such as logging into a user account) and are valid in each case until the end of the browser session. This means that, depending on your browser’s type and settings, the cookies are automatically removed after the end of the session or after the tab or browser is exited unless you have configured your browser settings differently. The session cookies we use contain only a session ID.  

‍Persistent cookies are stored for future sessions on your computer to recognize visitors returning to the websites after a long period and to be able to offer them the products or services they require. Persistent cookies are permanently stored on your terminal device and are not deleted when the website is exited or the browser is closed. Persistent cookies can only be removed manually.  

‍What are cookies used for?  

• Strictly necessary cookies  
Strictly necessary cookies are used to make a website usable by enabling basic functions such as site navigation and access to secure areas of the website (shopping cart cookies, cookies for logins, cookies for storage of country/language selection, cookies for using cookie consent tools). The website cannot work properly without these cookies. These cookies cannot be disabled.  You can configure your browser to block these cookies or inform you of these cookies. If you do, some parts of the website may not work.  

‍Service provider Salesforce UK Limited (f/k/a salesforce.com EMEA Limited  Salesforce Tower Dublin North Dock Dublin 1 D01 W2Y3 Ireland

Purpose ‍ Hosting of the website and the consent data

Legal basis ‍Art. 6 para. 1 s. 1 lit. f GDPR § 25 para 2 nr. 2 TDDDG

Retention period
BrowserId
CookieConsentPolicy
LSKey-c$Cookie ConsentPolicy
PreferredLanguage 0DMKI000000PBK84A
O __Secure-has-sid
ak_bmsc bm_sv
guest_uuid_essential _0DMKI000000PBK8
inst oid
sid sid_Client
‍
Transfer outside of the EU Salesforce uses sub-processors in third countries. Standard contractual clauses are concluded with the service providers.   The sub-processors, the services provided and the place of processing can be viewed here.    

• Functional cookies  
Functional cookies allow additional features and personalization to be offered such as videos and live chat.  If you do not permit these cookies, some or all of these features may not work properly.  
- Not currently in use -  

• Analytical cookies  Analytical cookies are used by us or third parties for tracking and analyzing user behavior, delivering user-based content or for marketing purposes. This means we can show website contents that are appropriate to the target group and improve website content and functionality.  If you do not permit these cookies you may not experience user-based contents or targeted offers on other websites, for example.  
- Not currently in use -  

The legal basis for storage of cookies, device identifiers and similar tracking technologies or for the storage of information on the end user's terminal equipment and access to this information is the European ePrivacy Directive in conjunction with the TDDDG.  

Please note that the legal basis for processing the personal data collected in this context then stems from the GDPR (Art. 6 para. 1 sentence 1 GDPR). The relevant legal basis according to the GDPR in each specific case of processing of personal data can be found below in the table on the cookie or tracking technologies used by us.  

The primary legal basis for the storage of information on the end user's terminal equipment—in particular, for the storage of cookies—is your consent, Section 25 para. 1(1) TDDDG. By visiting our website, you give us your consent—which, of course, does not have to be given—and you can revoke it at any time in the Cookie Settings.  

According to Section 25 para. 2(2) TDDDG, consent is not required if the storage of information on the end user's terminal equipment or the access to the information already stored on the end user's terminal equipment is absolutely necessary for the provider of a telemedia service in order to be able to provide a telemedia service expressly requested by the user. You can see in the Cookie Settings which cookies are to be considered absolutely necessary (often also referred to as "technically necessary cookies") and therefore fall under the exceptions to Section 25 para. 2 of the TDDDG and hence do not require consent.  

If you opt out (for example, by disabling a cookie that you have previously confirmed), a persistent cookie will be installed by us to allow an opt-out (disabling) of cookies to be recognized and considered during future visits to our websites.  

Opt-out cookies prevent the future recording of your data when visiting this website from a particular terminal device or browser and a specific domain. However, to prevent recording on different devices, the opt-out must be performed on each device/browser used.


2. Data processing during inquiries  

If you contact us, e.g., via e-mail, phone, or contact form on the BIOTRONIK websites, we will use the data you shared with us to process your inquiry.  

In order to provide you with the right information or check that you are properly authorized, we will normally need the following information:  
• E-mail address
• Name
• Country
• Address, if necessary
• Device serial number, if necessary
• Other data provided, if necessary  

Your data are processed on various legal bases depending on the content of your inquiry:
• contractual queries: Article 6 para. 1(b) GDPR
• legal obligations: Article 6 para. 1(c) or Article 9 para. 2(i) GDPR (e.g. provision of technical manuals or product information)
• legitimate interest: Article 6 para. 1(f) GDPR
• where consent has been granted: Article 6 para. 1(a) or Article 9 para. 2(a) GDPR  
‍
No data will be passed on to third parties; however, in some cases we contract service providers who process data on our behalf or we might pass data on to affiliated companies in case they are responsible for processing your request.  

After your data are transmitted they shall be deleted immediately once they are no longer required for the purposes set out above and within 3 years, provided that there are no other legal obligations to retain data.  


‍Recipients  

Your data is generally processed by BIOTRONIK in Germany. BIOTRONIK also uses service providers as processors for individual services.  This includes the support by BIOTRONIK affiliates in collection and processing of the consent within the country of patients’ residence as well as the provision and maintenance of IT systems by Salesforce UK Limited. Data is transferred to the United Kingdom based on the European Commission’s Adequacy Decision. BIOTRONIK also concludes the current version of the EU Standard Contractual Clauses for all data transfers outside the EU. If data is transferred to other affiliated companies, we have also concluded the EU Standard Contractual Clauses with them.  


‍Security  

To ensure the confidentiality of your data also during transfer, we use state-of-the-art encryption methods.  

Last update: April 07, 2025